This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer File: fpScldDM2ZyF7AchB2RMjMjR4Xg.cer (raw, json) Hash identifier: IgMa1WyMaMcOeolECiwkAPwXdLwCf+cYzBN2XbLPymw= Subject key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9F556814E6679423DFFA6B704DE74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214509 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f5:56:81:4e:66:79:42:3d:ff:a6:b7:04:de:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:16:8e:48:b5:4b:a0:52:a3:30:53:5a:45: 88:3a:5b:a4:17:65:e9:85:af:e8:c2:28:16:2d:af: ab:d3:db:ea:a3:3b:0b:b1:19:87:be:c2:25:32:dc: ec:f4:7a:0a:f4:06:de:42:5f:cc:5d:18:6e:9e:45: d7:b3:e0:6b:97:e4:97:7e:ec:3f:b6:dd:ab:35:c2: 95:ea:32:7e:d4:77:39:e3:94:ae:de:74:49:a3:b9: e5:29:62:c6:07:98:01:72:1e:3e:27:fc:b3:4f:77: 4c:cb:76:a1:75:cb:e1:2d:6e:89:44:00:1b:4a:08: df:74:4e:e3:6c:bd:2e:17:ac:cd:5a:1e:b5:c7:bd: 18:72:d0:e8:fc:9d:95:4d:a6:f0:2b:11:56:2b:f2: eb:43:5d:3b:3e:a9:60:a6:6b:e1:38:f4:df:08:a0: 6a:ae:1e:cd:78:c5:2d:f0:a0:7d:3c:00:86:12:86: ee:43:94:c6:16:1c:8f:f1:8a:62:36:4c:9e:23:c3: e0:58:f1:ef:62:7a:99:d0:93:df:34:d6:af:02:f2: c9:5a:f7:f6:05:76:a7:12:50:db:5c:33:e0:b9:f7: 41:ca:5e:c3:27:51:98:37:10:b6:09:95:10:ae:9d: 49:39:ec:45:35:ed:00:8a:1c:0d:3b:77:25:90:08: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214509 Signature Algorithm: sha256WithRSAEncryption 30:bd:83:34:b1:9b:5c:04:4c:f8:d1:73:db:34:5a:5a:6c:fd: ae:62:c7:6e:b6:99:9c:d6:51:10:8c:60:a1:06:2b:5f:94:c8: ec:53:bc:84:44:af:77:72:1d:6f:db:54:46:73:2f:6c:a7:66: f2:e2:63:bd:3a:b6:70:06:13:81:b4:9f:76:61:0e:ef:b5:3a: 47:94:34:85:ba:31:b4:b2:86:4c:a8:2e:3f:06:b4:5a:4f:ec: bc:33:07:a1:44:3e:3e:c8:68:9c:cb:eb:c6:15:7a:a0:d3:e6: 96:8b:f2:3f:4a:5c:c7:59:90:6d:f2:91:86:6b:e1:53:e2:7f: ae:b6:7f:58:cf:e8:21:29:6e:72:2b:df:ea:d1:0f:72:f2:f1: f2:93:37:29:b6:03:27:3f:00:79:b5:b8:ad:01:8e:0f:14:bb: e5:e2:0c:54:a1:2d:38:62:f3:57:ae:da:0c:4b:9c:1a:db:a8: e5:06:9d:a1:d8:cc:a9:b6:07:c2:6d:4e:89:1c:a5:b5:e4:06: 7f:e1:9d:75:16:88:73:d9:26:f7:97:57:14:78:bf:de:94:58: 6c:a7:b4:44:46:2b:80:99:e6:80:69:47:4c:56:75:9a:02:ca: 2a:de:91:63:36:22:f4:3c:93:7f:7e:1b:72:4b:d1:48:62:ad: c7:b7:75:1d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9yfVWgU5meUI9/6a3BN50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTk0OWM5NWQwY2NkOTljODVlYzA3MjEwNzY0NGM4Y2M4ZDFlMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL0Wjki1S6BSozBTWkWIOlukF2Xp ha/owigWLa+r09vqozsLsRmHvsIlMtzs9HoK9AbeQl/MXRhunkXXs+Brl+SXfuw/ tt2rNcKV6jJ+1Hc545Su3nRJo7nlKWLGB5gBch4+J/yzT3dMy3ahdcvhLW6JRAAb SgjfdE7jbL0uF6zNWh61x70YctDo/J2VTabwKxFWK/LrQ107PqlgpmvhOPTfCKBq rh7NeMUt8KB9PACGEobuQ5TGFhyP8YpiNkyeI8PgWPHvYnqZ0JPfNNavAvLJWvf2 BXanElDbXDPgufdByl7DJ1GYNxC2CZUQrp1JOexFNe0AihwNO3clkAgUCwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFH6UnJXQzNmchewHIQdkTIzI0eF4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzk4OGNl NS04NGFjLTQyYjctYjYxMi1kZDhmNjUyOGVjMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvOTg4Y2U1 LTg0YWMtNDJiNy1iNjEyLWRkOGY2NTI4ZWMxMS8xL2ZwU2NsZERNMlp5RjdBY2hC MlJNak1qUjRYZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNF7TANBgkqhkiG9w0BAQsFAAOCAQEAML2DNLGbXARM +NFz2zRaWmz9rmLHbraZnNZREIxgoQYrX5TI7FO8hESvd3Idb9tURnMvbKdm8uJj vTq2cAYTgbSfdmEO77U6R5Q0hboxtLKGTKguPwa0Wk/svDMHoUQ+PshonMvrxhV6 oNPmlovyP0pcx1mQbfKRhmvhU+J/rrZ/WM/oISlucivf6tEPcvLx8pM3KbYDJz8A ebW4rQGODxS75eIMVKEtOGLzV67aDEucGtuo5QadodjMqbYHwm1OiRylteQGf+Gd dRaIc9km95dXFHi/3pRYbKe0REYrgJnmgGlHTFZ1mgLKKt6RYzYi9DyTf34bckvR SGKtx7d1HQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:59 2026 by rpki-client